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E:y*2=x*3+ax+b tL. E(GF(p)) Otc P = (x. y) ^ Z 
=1. X=x*Z*2. Y=y*Z*3 Ic J: tj LfcSt^ffiS (X,Y, 
Z) ICJSI^T. J!ipa:^^(Dr^SP^$*fiE-V=ieT>ffiS 
(X. Y, Z, a*Z^4) <!: t <t ^ffiRffiS/1t9:S 

So 

{*:GF(p»±0«RffiS^ E tL. E(GF(p») (Dtz^ 
P = (x.y) ^ Z=l. X=x*Z'*2, Y=y*Z*3 iCcty^^Lfc 
ItKiSI^ (X,Y.Z) lC^5l^-C, J!H39:<i>^CO|:^aJji^<giE 
^zi t*T > (X. Y. 1, a*Z'^4) <!: <t ^^^tr^mF] 

[It*«3] ±I^«IRfiS36a:SMICifel^■C. E(GF(p)) 

P=(X1. Yl. Z1, a*Zr4). 0=(X2, Y2, Z2. a*Z2*4) (P 
^ Q) 

X*^^t^. P+0=R=(X3, Y3. Z3. a*Z3*4)^. 
U1=X1*Z2*2. U2=X2*Zr2. S1=Y1*Z2*3, S2=Y2*Zr3, H=U 
2-U1, r=S2-S1 

X3 = -H*3 -2U1*H'^2+ r^2, 
Y3 = -S1*r3 + r(Ul*r2 -X3). 
Z3 = Z1*Z2*H. 
a*Z3^4 = a(Z3^2)*2 

[IS*«4] ±iBlsnffl^>l5S:SMi^fcu^r. e(gf(p)) 

P=(X1. Y1. Z1. a*zr4) 

ft^t^. 2P=R=(X3. Y3. Z3. a*Z3*4) 

S=4Xl*Yr2. M=3Xr2+a*Zr4, T=-2S+M^2 

X3 = T. 

Y3 = -8Yr4 + M(S-T). 
Z3 = 2Y1*Z1, 

a*Z3*4 = 2*4*(Yr4)*(a*Zr4) 

» GFCp) ±(DffiRftSIS 
E:y*2=x*3+ax+b 

(tU. E(GF(p)) 07tP= (x.y) (DSfS^ kP = P + 
... + P(kIslCD*0»)a)ti-»:^. J^a^2®Jil±M^^ 

*^-&T^T* 5 c <!: ^ i^at ufciSRftS/ieir^^o 

F(p^r)±0:SRffig^Et L. E(GF(p») CDtc P = (x. 
y) (D35fS^ kP = P + ... + P(k[Hl(DJ!Dlt)CDtt3i:*. 



RfflS^E:y^2=x''3+ax+b tL. 

E(GF(p)) cDtu P = (x.y) CD»fSjS kP = P + ... + P 

(klKOJtaS:) 

^ttlE-r'5±fBlSRfflS3?3tSai-fct^T. wS-iESS 
(tU. kS 

k=2^k0(2^k1(- ■ • (2*kvW[v] +W[v-1]) • • • )+W[0]) 
(W[i] ItmSL. ^ W[i] ^ 2''w-1)<!:S-ri:#. 

iP = Pi=(xi.yi) (i 1 ^ i ^ 2"^^!) 

$T:7-f >ffiffi-eftS:L. kP oltS:*. (ki-1) [§02 
fgiSCDtt*!*. 1 1fiKOMai (X. Y, 1, a*Z^4) 

•c^TL^. ki m^<Dzm^<r>mmt. ^^\£r>&m 
(X. Y. z) (X.Y,z)i:7^-:^;uo>jS Pi<tcDi)Plt 

(i. iS*^ 1 SHKOiSai (X. Y. Z.a*Z*4)T**a^)^Ci: 
5 IBi^(7)4aR A^;1l3:3S9o 

[iS*«8] p^^JSa. k^iESa. *|gi*GF(p)±Ott 
RfflS$E:y^2=x*3+ax+b <i: L. 
E(6F(p)) <D7c P = (x.y) (DlE^gjS kP = P + . . . + P 

(kmcDjtaS) 

^tts:•rs±lH^SRffl«l>1^^^^a(^fct^-c. w^iEsa 

^L. k* 

k=2*kO(2*k1(- ■ • (2^kvW[v] +W[v-1]) • • • )+W[0]) 
(W[i] (i^a. 3b^-^1 ^ W[i] ^ 2^w-l)^Sri:#. 

iP = Pi=(Xi.Yi.Zi,Zi''2.Zi*3) (i (i^a. 1 
^ i ^ 2^vif-l) 

hV T^X^-VaeTViSffit?**^. kP (DttS: 
(ki-1) Isl(D2fgjS(Dftlt(i. iS*^ 1 1BKCD^IE^ 
=3tfT>ffi«l (X. Y. Z. a*Z*4) •C^TlV ki [slB(D2 

iSMonmt. ^^\zr>mm (x.y. z)-e*4^). (x.y. 

•V=3eT>«S(X. Y. Z.a*Z^4)T'*i^)^Ci!:^. glU 
ig-r C <!: iz J: o C i: ^i^St <t L 5 SEKc;) 
:tSRAIISI»^@o 
[il*«9] pS*a. k^iESa. ^K{*GF(p)±(D«f 
RfflS$E:y*2=x*3+ax+b 

E(GF(p)) cDtc P = (x.y) CDlEfg^ kP = P + . . . + P 
(klHloftiS:) 

^t^•a:-r^-tI^^SRffl©>1i»ss(:Ifct^T. w^iEsa 

<!:L. k^ 

k=2*k0(2''kl(- • ■ (2''kvW[v] +W[v-1]) • • • )+tf[0]) 
(W[i] (i^a. A^-^l ^ W[i] ^ 2^fi-\)t^irt^. 

iP = Pi=(Xi.Yi.Zi.Zi'^2.Zi'*3) 

(i (i^a, A^o 1 ^ i ^ 2"w-1)^^^ hV :^X^-V 
=ieT>filST*3K^-5<!:#. 2P=(x.y) 
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[iB*^1 0] p$Sa. k^iESa. :&IS(*GF(p)±CD 
tSRffl^SE:y*2=x*3+ax+b tL. 
E(GF(p)) (D5c P = (x.y) CD3Sfg^ kP = P + . . . + P 

tL. k^ 

k=2*kO(2*k1(- • ■ (2*kvW[v] +W[v-1]) • • • )+W[0]) 
(W[i] li^a. A^o1 ^ W[i] S 2*w-l)i:S-ri:^. 

iP = Pi=(Xi.Yi.Zi.Zi*2.Zi*3) 

(i li^a. 1 ^ i ^ 2'^w-l)$^-V' hV:?X^^ 
3eT>iSS-c?*Ar)^t#. Iii:tfi>fr. 2P=(x.y) 

is^n 8 ^mcoismm^mn&mo 

[000 1] 
[0 0 0 2] 

(ciHi §^ ^ ;^ t> -r c 1 3S < iid ^tr^c 5 -C fe ^ o 

(Neal Koblitz . " A Course in Number theory an 
d Cryptography", Spinger-Ver lag, 1987) irgf L < 

i^ixxi^^o aRft®±(7)St««aBgs&iaTicai-< 

[0 0 0 3] mFiebm±omwLiiSLPsm 
E(GF(p)) ^mmmF{p)±^m^*tfzmm&mEtL. e 

Y=xG 

[0 0 0 4] jjiTizjiiBfflRfte±<Dfiia«ap^ss«; 

[0 0 0 5] («t*CI1) S6l*tj£*«-Cfc-5«tRfte 



[O0 0 6] UITf^^$#^L>SA<^>fi£3fcC90^IIII$Bi 
(1) -fe^^CDKS 

pS*a. GF (p) Ji(DffiRfte^E<t ^(7)^afiaq 

a^xat-r^o -b^^-iiiftap^^i/ttRftSEst;^- 
AcD^gaaYa^^gg-r^o 

[0 0 0 7] (2) S^^fiK 

1 aaks±«-r-&„ 

[0 0 0 8] 2 R1=kG=(rx. ry) 
sk=m+rxxa (mod q) ^ti'M't^ 
3 (RK s) $S«^Lrm«!:<b:tifcS{i'r^o 

[0 0 0 9] (3) 5«gliiE 
si = mG + rxYa 

[0 0 10] ±U^^m^■X!t>t^^^5\z^ ttRfteS 

P(tt3feCyef±l^gaaYa(z4a^)<D»f&a>;1iS kPaO 

[00 1 1] E. F. BrickelL D. M. Gordon, K. S. McC 
uriey and D. B. Wilson^Fast exponentiation with pre 
computat ion". Advances in crypto logy-proceedings of 

Eurocrypt' 92, Lecture notes In cociputer science, 1 
993. Springer-verlag. 200-207.—:^. ffS^P<7)»f& 

[0 0 12] Miyaji. One. and Cohen. "Eff i c i ent elli 
ptic curve exponentiation". Advances in cryptology- 
proceedings of I CI CS' 97. Lecture notes in computer 
science, 1997. Spr inger-ver lag. 282-290. C Zt?ffl^ 

[0 0 13] a7(iS£*«-cfe*<SRffl«3l»SMa)« 

[0 0 14] i^iSk^z) p^ieoe-y hcosatu. ^ 

K«:6F(p)±<DffiRfflgl^ E t L. E(GF(p)) OffjgCO 

7c p icjtur. k*p onu^-Tho cc-e. kozm 

k = kO + k1*2+ k2*2*2 + . - - + k159*16*159=[k15 

9 k2.k1,kO] 

(kO. •••.k159 = 0.1) ti-^o 

[0 0 15]step1. w=A ^^-O add'itlo 

n-subtraction iS3iS^C0S^ 

k=2*kO(2*k1(- • • (2*kvW[v] +W[v-1]) • • • )+W[0]) 
ZZV. W[i] li^a. t^^) ^ W[i] ^ 2''4-1 -efc 

[0 0 16] w[i) ^(o^myj^it. -sa 0 ^ t ^ 2* 

5-1 ^ -2'^4+1 ^ t ^ 2*4-1lcS»-r^S^>^cf^g&-C? 
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[0 0 17] step2. ^litt»7^-^;K7)itJS 

sP(s=3. 5. ... 15) ^-v =3 >m.mx'nnL. =^mt^Si 

[001 8 ] steps. kP (DttK 

[00 1 9] 'i^^mx'it. —oomm^mm-r^fziib^ 
tt:cD^s:[Hiia3b<^ <tji^ti^5 ?^mt^s>^o 

[0 0 2 0] K— Si;KDH-S:»$miHiia'C*S"rt. 18 
82Mul \ztj:^o ::c-C. Mul (i 1 HCOGFCp) T'O^K^ 
afo ^S^<D3ie^CDSI»l±. 2«^c7)3S3t3!)<iiPWI- 

[002 1 ] 

[0 0 2 2] ^^ma^miSiSi^^i^^yo^it. ^mmjk 

[0023] CCD^^3fcC!IlCfclt^PD^S^^|g 

SiS^^ctBt-^^ll/S^ * S^-r ^ C <!: * i M *r ^ o 
[O O 2 4] 

md^-r^f'isb. BI*«lT'lip ^fftSitL. =&IS(*GF 
(p)±<D:KRffi«l5 E:y*2=x*3+ax+b <h E(GF(p)) (0 
TuS P = (x,y) $ Z=1. X=x*Z*2. Y=y*Z'^3 [z^iJ^Wk 

Lfzm^&m (X.Y.Z) icfciNT. ija»:^^(;>i^SPia* 

[0 0 2 5] it*3l2-ei*, p^i^SttL. r^IESa^ 
r^t^. :&|®tt:GF(p''r)±CD«RftS^ E ^ L. E(GF 
(p"r)) CDtuS 

P = (x.y) ^ Z=1. X=x*Z*2, Y=y*Z*3 
\z^i)mWkl.tzm^mm (X.Y.Z) ttis:'^^ 

(Di^g^^^iE-vri eT>$!^ai:-r^^Raa3s»s 
[0 0 2 6] i«*«3-e(i. ±umF^mSi^u^mz^ 

l^X. E(GFCp)) (DTc^^iE-VneTVffia 



P=(X1. Y1. Z1. a*Zr4), 0=(X2, Y2. Z2. a*Z2*4) (P 
^ Q) 

-CS-ri:^, P+0=:R=(X3, Y3, Z3, a*Z3*4)S. 
U1=X1*Z2"2. U2=X2*Zr2. S1=Y1*Z2^3. S2=Y2*Zr3. H=U 
2-U1, r=S2-S1 

X3 = -H*3 -2U1*H'^2+ r*2. 
Y3 = -S1*r3 + r(U1*r2 -X3), 
Z3 = Z1*Z2*H. 
a*Z3"4 = a(Z3*2)*2 

[0 0 2 7] ii^^4-C(*. ±ISffiRffl«ISIS3Sai3fc 
INT. ECGFCp)) <D5c^. ^lE-^aerVJ^S 
P=(X1, Y1. Z1. a*Zr4) 
ft^t^. 2P=R=(X3. Y3, Z3, a*Z3*4) 
S=4X1*Yr2. M=3Xr2+a*Zr4. T=-2S+M'*2 

X3 = T. 

Y3 = -8Yr4 + M(S-T). 
Z3 = 2Y1*Z1. 

a*Z3*4 = 2*4*(Yr4)*(a*Zr4) 

ir cfc y *tf>-5) t ^^Wit LfclS^iS 1 1B«c7>ftRttiS 

[0 0 2 8] ii*^5T?l*. pt:mSLtL. k^jESS*!: 
■r^i:*. GF(p) JiCOfifRffi^^ 

E:y*2=x"3+ax+b 

E(6F(p)) (Dtc P = (x.y) (DWiS^ kP = P + . . . + P 

Offjt^. &m^zMi€i±m^'^t>i±X^tf:^z.ti^ 
mt L/rffiRftll3IKSia*!^«i:"r^fllRttS/^it^ 

ai: LXl^^o 

[0 0 2 9] H*^6T*(i. p t:BSLtL. r.k ^5ES 
a«!:L. =&E«:GF(p^r)±CD:KRa8* E t L. E(GFCp 
*r)) <D5c P = (x.y) (OWf^^ kP = P + . . . + P(klHl 

cDjbnjtXDH-jt^. &mi:^mu±m^^t>-\±x^tj:o 

[0 0 3 0] f»3R«7X'li. p^lRSS. k^IESa. *E 
(*GF(p)±(DffiRttS^E:y'^2=x''3+ax+b tL. 
E(GF(p)) (Dtc P = (x.y) C7)3i«jS kP = P + . . - + P 

^tf»-r^±IB*gRffl^3lff^ai::fct^T, wSIESS 
itL. k^ 

k=2'^k0(2*k1(- • • (2*kvW[v] +W[v-1]) • • • )+W[0]) 

(w[i] li^a. t-^-D^ ^ w[i] ^ 2^w-i) t^-r^^. 

iP = Pi = (xi.yi) (i 1 ^ i ^ 2*w-1) 

*T:7-f ViSST'ttKL. kP (Dftjr?. (ki-1) [h1<752 
fgia(7>ttS:ii, m*« 1 SBfiCDiSS (X. Y. Z. a*Z^4) 



(5) 
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(X. Y. z) t^ifttb^ (x,Y.z)t^-y)u<D^ p\tomn 

It. fS*^ 1 SSaoiSS (X. Y. Z.a*Z*4)-e*tfi»^Ci: 

[003 1] iS««8Tli. p im&. k^iESa. ^ 
IStt:GF(p)±<7)aRffi^S 
E:y*2=x*3+ax+b 

t L. E(GF(p)) (05c P = (x,y) CDlEfS^ kP = P + 
... + P(k[5ja)jtaa[)^tfK-r^±S2«F3fi^>1llt^M 
icjst^r. w^IESai: L. k£ 

k=2*k0(2*kl(- • • (2*kvW[v] ^WCv-l]) ■ ■ • )+W[0]) 
(W[i] li^a. >E»^o1 ^ W[i] ^ 2*w-l)<hS-ri:#. 

iP = Pi=(Xi.Yi.Zi.Zi*2.Zi*3) (i li^S. ;b^o 1 ^ 
i ^ 2*w-1) 

(ki-1) [sl<D2fSiac7)ttSL(i. if *31 1 iBKCDiSiEA' 
=it:T>ffi^(X. Y. Z. a*Z*4) t?^Tl\ ki lHlg<7>2fS 

^(Dt&mt. ^^tiT>mm (x. y. z)-e«A6. (x.y. 

Z)<!:x-Z^;UCDiS Pi<!:(7)JtiDS:f*. ig*a 1 1BE<0<SiE 

-v^er^ffiscx, Y, z,a*z^4)r***ft»-5)Ct$. «y 
[0 0 3 2] is*«9-ei*. p^msL. k^iESss. 

«:GF(p)±CD«Rffl^^E:y"2=x"3+ax+b tL. 
E(GF(p)) (7>7c P = (x.y) 03ifg^ kP = P + . . . + P 
(klHl covins:) 

i:L. k^ 

k=2"k0(2*kl(- • ■ (2*kvW[v] +W[v-1]) • • • )+W[0]) 
(W[i] \mSL, ^ W[i] S 2*w-l)<hS-rt#. 

iP = Pi=(Xi.Yi.Zi.Zi*2.Zi*3) (i li^S. 1 ^ 
i ^ 2*w-l) 

fc. 2P=(x,y) ^T:7-<>ffigT?*d6SC<!:^!t#a^L 
fcii*^8lB«<D«|R*S;1l9:SS<t LTt^^o 
[0 0 3 3] iS*siorMi. pS^gfe. k^IESa. ^ 
K8»:GF(p)±CD:BR*®$E:y*2=x*3+ax+b tL. 
E(GF(p)) <7>7L P = (x.y) CD»f&^ kP = P + . . . + P 

^f^■l^■r^±f^«Rft®^1lssMlcfcu^T. w^iEsa 

tL. k$ 

k=2"kO(2'^kl( • • • (2'^kvW[v] +W[v-1]) • • • )-Hlif[0]) 
(Wti] li^a. A^OI ^ W[i] S 2^^))tSi't^. 

IP = Pi=(Xi.Yi.Zi.Zr2.Zi*3) (i li^Sfe. ;t»^o 1 ^ 
i ^ 2*w-1) 



ir. 2P=(x.y) ^^-t' hV:?x+^=ier>ffiS-e*i^> 
^ C t ^ t UfcH*ffl 8 IEK<^«Rft©>15»Siai: 

[0 0 3 4] 

[0035] (|gtSa>f^Sg 1)^1 I^^Rffi^SS^SS 

[0 0 3 6] CC-e(*. p$160tf*v hOigatL. GF 
(p)±a)^Rffle E:y*2 = x*3 +ax+b. -^COtcS P=(X1. 
Y1. Zl. a*Zr4). 0=(X2, Y2. Z2. a*Z2*4) (P ^ 0) 

P+0 = R= (X3. Y3. Z3. a*Z3"4) 
S laT O X T- 3f * tf) -5) o 
[0 0 3 7] step 1. tt^FBlfitCOtfS: 
U1=X1*Z2'^2. U2=X2*Zr2. S1=Y1*Z2*3. 
S2=Y2*Zr3. H=U2-U1. r=S2-S1 

[0 0 3 8] step 2. R= (X3. Y3. Z3. a*Z3*4) 

X3 = -H^3 -2U1*H'^2+ r*2. 
Y3 = -S1*H*3 + r(Ul*H*2 -X3), 
Z3 = Z1*Z2*H. 
a*Z3"4 = a(Z3"2)*2 
(m^mmz) B2li*gRffl^;1IS:S®lcfcMt*<^iE 

^iier>icj:^2fS^<D:&afe*^-rtcD-e&^o iut 
[0 0 3 9] cc-et^jg(7>j^88i ti^fliir. psieoe 

*y hCD^a«t L. GF(p)±<D4gRfflfil E:y''2 = x''3 +ax+ 
b. -?-(7)7c P=(X1. Yl. Zl. a*Zr4) r*S-r<t#. 
2P = (X3. Y3. Z3. a*Z3*4) 

[0 0 4 0] step 1. ^PalfilOttS: 
S=4Xl*Yr2, M=3Xr2+a*Zr4. T=-2S+M*2 

[004 1] step 2. 2P = (X3. Y3. Z3. a*Z3''4) 

X3 = T. 

Y3 = -8Yr4 + M(S-T). 
Z3 = 2Y1*Z1. 

a*Z3*4 = 2*4*(Yr4)*(a*Zr4) 

-tlSOSIiSCD^^SS 1 . 2(Dt^-8:S!COL^ra^^o GF 
(p)JiCD1IHlCD^ir$MuU 3S7c;1l»^lnv. ZmMiSqV 
S-To InVitMulcOtt^f*. Slg:^jSfrJ:yS)tf'SA<. Sq 
tMulOhb^r*. $5 Scf0.8MuI V&^o 
[O O 4 2] ^JSC7)J^gg1 . 2^ffiL^T«^Rft^S±<D^I^ 
im^^mmr^t. JtK]jt)b<13Mul+6Sq V. 2f&jt 
(i. 4Mul+4SqIil-eSIS-C*'5„ m»lt. a3fcA^t,a^b^i 



(6) 
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[0 0 4 3] :^Rfi^a>3i<&,^ kP (k=160e»:; h) CD;16 
3H*. jtlDfflCit-<2fS»:(7>giya5L[sl!aA<^l>o CCDfc 

^t*«2lr-Vi3eT>iS«|CDft*^yiC. ^jffiCDJ^ffi 
1. 2C0l^iE^i3eT>ffia*^L^^<!:. Sii^bA<T*^ 

^ES. $t*«523bn882Mul-C^ofcOirJtL. HJS 
<DJ^®1. 2a)^jE-\'=ieT>ffi«^®^r^i:. 1722 
Mul7?|IST*#^o cfc-oT. 2fg3t3b^?S5$3ti:jgiE'V3 

[0 0 4 4] (|IJ£<7>ft^ffi3) ^3li*i£^(7>llt£0^^ 
®3lrfclt'5>«Rft^SS»S®0«|jS^^t-4i<7>-C& 

[0 0 4 5] iUTI^S^#,^L3SA<t>^tS(7>J^^a>¥)li 

(D^mRfi^* E tL. E(GF(p)) CDffftOTC^ P . k*P 

[O O 4 6 ] k=2^k0(2''kl ( • - • (2"kvW[v] +W[v-1]) 
• • O+WEO]) 

step 1. ^«H'9:i^-7^;ua)ftiS 
sP(s=3,5....l5)$T:7>r >ffiSt?fl-S:L. ^(iittltT^ 

[0047] step 2. kP (DtfS: 

fiitt»^-::^^KDfil(T3?-r>iSa) ioft]»^^iE-V 

[0 0 4 8] ■T'ti:*:)**. 2*kPl +W[2]P*. (P1l*^*0 
step 2-1. (k-l)lHl . P1S<SiE-V=i fT>i^Sl::<fcy2 

[0049] step 2-2. 2'^(k-1)P1 ^2^&L. ^S^-V 
step 2-3. W[2]P $7^— ::^;^7b^t)#^.•r^ (T37-f >^ 
step 2-4. -V^er^iSacD 2^kP1 i:737-f>ffia(D 

[0 0 5 0] ±IE^ffia)J^^3CD«R;159:SM(*. 2f& 
^IDS:|cfcl^t:li. -Via t*T>MS<!:T:7-f 

^IB. V~^}\^<hV(%^\t.. 8lnv+1456MulT'fc^o 
tjS&3fel^(D1882MullcltKLT, lnv<;53.3Hul T^fetuli^ 
JgOi^SSCD^A^SaCi'tP^o -flSir. lnv<;30MulT*fc 

[ O O 5 1 ] (HifeOJ^IS 4)^4 (i*^q[g(D|lt£(Df^ 



gi4irfcit-&«!RftS;*sifsao«ja$^-rto-efe 

[0 0 5 2] UlTfll^S#SP.L35:3b<t)*IIJSCDJ^®<0^ 
M^KB^-T'&o P ^160e»v h(DiSSfci:L. ^Ki*GF(p) 
±(7)fflRffle^ E i:L. E(GF(p)) (7)ffSCD7c^ P . k 
*P OH-K^-r-So -cr. kA<^**«2<Dcfc5lcUlTr* 

[0 0 5 3] k=2*k0(2*k1(- • • (2*kvW[v] +W[v-1]) 
• ■ O+WEOl) 

step 1. ^«tSt»7^-:?^ucoft)S 

sP(s=3,5. ...15)^, 2Pli, T:7>f >ffiaiT'tfS:L. 2P+ 

[0 0 5 4] (^{ift»i^-:^;ni5^-v hV zfx^A'a 
step 2. kP CDS-lt 

<t(7)J!iD»$<^iE-V=ib:T>iSS-e*a6T. -^CDlKS^^ 

iE-v=ieT>isar-23iEf&f s*issii^=ieT 
>*aT'^^ c i: ^ » y ist-o 

[0 0 5 5] ■r?S*:>*>. 2*kP1 +W[2]P*. (Pir*^*(X) 
step 2-1. (k-1)lHl . P1^<giE^=i fT>iS»l::«fcy2 

[0056] step 2-2. 2^(k-1)P1 $2f&L. SS^-V 
step 2-3. W[2]P ^'f—^)\^ti^^%Wth KV 3^ 

step 2-4. fT>]Saa> 2*kP1 t^^-V hV 3^7.^ 
■VaeT>iSacOW[2]P**a»L. Smii^IE-ViaeT 

[0 0 5 7] ±ia3l8Sc7>J^®4(7)fllR359:Saii. 2^& 

3;1^ffia^ffil^^-<t(=J:y. :^{*cDmj»:(Dlil»*SE 
?,-rc^)!»<-e#^o HPS. h-'S'VKOttJtaii. lnv+15 
93Muir*fc^o t*3feCiI<D1882MulirttKLr. lnv<;289Mul 
T'fett(SlltSa)Jf^®4<D:S*^SiSi::'5:^o -flSI^. Inv 
<:30Mul r-fc-S C <t c*: y . S£3fe«cJ: y ^*^*^(cSi£l^H^ 

[0058] (^JSOJ^e 5)^5 (**fl^(D|ISEC7)Jf^ 

S5icfcMt-5ffiRfflS3tK^acD«id^^^v-rtcD-e& 

[0 0 5 9] iaTi^^$#^L?SA<t)*^SfeOJ^®CD^ 
fli^S^^-r-So p^160t''V KOIfeat *fS<*GF(p) 
±a)«IRfflSS E fcL. E(6F(p)) Oftft<D5n$ P . k 
*P C0tf3£S-rSo k7b<^S*«2(D<t5l^iaTT* 



(7) 



i^MW- 1 1 -2 1 24 58 



[0 0 6 0] k=2*kO(2"kl(- • • (2*kvW[v] +W[v-1]) 
• • O+WEO]) 

step 1. "^mnS-^—r^JVOi^fS. 
sP(s=3.5....15)$. hV:^;^:^^3eT>^St? 

[006 1] (^filn-S7^-:?;ni^v hv y;^^^:^ 

step2. kP (7)tfff 

[0 0 6 2] -ttiit^ib. 2*kPl +W[2]P^. (Pll*i^«(7) 
step 2-1. (k-l)lHl , P1^<fI-\'zie7'>iSffifrJ:y2 
[0063] Step 2-2. 2*(k-1)Pl ^2f&L. SS*-V 

step 2-3. W[2]P $^-:^;^*^p>#SS'r'5 (f^vhV:/ 
step 2-4. -\'afT>iSSa) 2*kPi <t ^-v hV 

fT>]SScOW[2]P^AQg:L. SmiiiSiE-^aeT 
[0 0 6 4] ±S5llfflCDff^©5(7>:SR;1ISS®(i. 2^ 



lT*&^»o tt*fi!l<7)1882MulfziteiLr. li«>AMCJSi£lC 
[0 0 6 5] 

[@2] :«:$eq^l=j3lt^lltfi(0)&SS2a>^Rffi^a);1IS[ 



[@3] :4i:$l^l=fe(t-&SI£&(0}^|g3<0%nffl||SI^S 

momfitm 

[06] Vtmm 1 ©x;u*--7;US«ro«fiE@ 
[07] «£^0ll2<O^Rtt||;-||^S^@$^-r0 



[01] 

I stepl. ■t'Wilmtm: 



stBP2. Re*K)a 



[02] 



stepi. <t>«fBa}n« 



step2. 2P€*«)« 



17] 



at8»l. aH it ioo-SBltr tet lood^A(D^3lt| 






s t e p 2. ^ OSfffl: X - :r JK3D 













(8) 



11-212458 



step?. kPCDn# 



Step2- 




I 


St8P2- 


■2. 2M2*(k-n)eVDtr7:^*iRc:iDn# J 


I 


StflP2' 


-J.f l2lP€x-:rjtJ:D#i8l 



I 



i 

Sle»2-2. 2M2' [k-1))eVzHf7:^gg^CJ:qft» 

ste»2-3.i[2ipex":yjij:o#Bi 

1 ■ — , 



2Pti5i' hV774=^V=it!7:^fiS-cfM?: 



itep2. kPOft-ff 



51IP2-1. 2* (k-U€«fjEV3tr7:>*fet:ctOft# 



I 



S1IP2-2. 2M2* (k-U)€V3t:7:'^*C* Dtt5l 



I 



Step2-3.»(2] P^^-ySi^Om 



X 



Stflp2-4. 2*kPtf [21 ?^mi* WlE'^^kiJl^mmVo^ 
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[@6] 



{ 1 ) 1iU9(DlBC^ 




^rn^-.GF (p) 

nnmut e 



A -Ya 



(2) ««to^;« 
¥X m 

R1=kG= (r„. ry) 



m. R1. s 



( 3 ) *i,tkVE 

8R1=inG+rxYa 



